topic ISE with multiple AD in Network Access Control

ISE with multiple AD

Rajiv Dasmohapatra — Mon, 11 Mar 2019 03:41:38 GMT

Dear Friends,

I heard that we can integrate only one AD with ISE. But what if i need to integrate multiple AD's to ISE?

I also learned that we can integrate multiple LDAP instances to ISE. So can i use this option for my situation?

thanks in advance

- Rajiv

ISE with multiple AD

Chris Illsley — Fri, 26 Jul 2013 11:23:50 GMT

Yes and yes.

Thanks

Chris

ISE with multiple AD

Jatin Katyal — Fri, 26 Jul 2013 11:40:36 GMT

That is correct! Cisco ISE supports integration with a single Active Directory identity source. Cisco ISE uses this Active Directory identity source to join itself to an Active Directory domain. If this Active Directory source has a multidomain forest, trust relationships must exist between its domain and the other domains in order for Cisco ISE to retrieve information from all domains within the forest.

However, you may create multiple instances for LDAP. Cisco ISE can communicate via LDAP to Active Directory servers in an untrusted domain. The only limitation you would see with LDAP being a database that it doesn't support PEAP MSCHAPv2 ( native microsoft supplicant). However it does suppport EAP-TLS.

For more information you may go through the below listed link

http://www.cisco.com/en/US/solutions/collateral/ns340/ns414/ns742/ns744/docs/howto_45_multiple_active_directories.pdf

~BR
Jatin Katyal

**Do rate helpful posts**

Re: ISE with multiple AD

manjeets — Sat, 17 Aug 2013 10:56:16 GMT

Till now ISE support only one AD :

Multiple AD will be supported is ISE 1.3 Release, That will be release first quarter of 2014,

Review the attached.

Re: ISE with multiple AD

Rajiv Dasmohapatra — Sat, 17 Aug 2013 20:31:13 GMT

So I guess I have to go with LDAP with EAP-TLS for multiple domains.

Thanks Jatin and Manjeet.

Sent from Cisco Technical Support iPad App